Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: 5p6n860w8kX958AZsHLNN0n9ZuoLQoTa2clkgrY9HpA=
Subject key identifier: BB:AD:84:13:52:DA:51:D5:49:6B:A7:F3:F5:2A:40:45:E0:A8:69:0E
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 0194BBCDFBCA94FC39804ABA6D4A1DFA2807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1134
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: b4E3ROrJEt+j9CPk22HVflYuUabVDZMXk/Ng+4Mz79s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:ca:94:fc:39:80:4a:ba:6d:4a:1d:fa:28:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=bbad841352da51d5496ba7f3f52a4045e0a8690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:1d:a6:bd:fc:a3:1c:43:b6:23:68:f8:30:
7b:5f:aa:a3:f2:0c:8a:55:ef:4a:ae:8f:89:20:64:
59:39:d4:34:c4:57:8b:9b:c4:70:e6:e0:98:04:51:
16:d5:21:44:e4:a5:c0:fd:68:c9:5a:b0:42:af:2d:
1b:79:f9:75:01:3c:eb:3f:47:36:0e:ee:dc:6e:e7:
ed:93:01:2b:72:16:d1:0d:35:bc:da:9e:ed:94:90:
70:d1:e1:13:77:2a:0c:b8:53:67:0b:53:8b:18:e6:
48:33:6f:68:2b:75:11:9e:e0:ce:f8:f8:b8:3a:21:
57:96:ba:bc:31:29:23:04:b7:c8:34:7d:ac:83:1c:
f6:ee:e4:a3:5b:9d:74:3c:3c:62:cc:fb:97:5f:ae:
3f:b0:bf:c6:71:53:10:5f:bf:82:82:6d:46:77:00:
aa:7c:54:fe:47:15:d7:e5:1e:09:49:fd:c3:5b:0e:
fc:d8:fe:77:4c:d5:35:bb:a6:d8:fd:91:e7:9f:86:
65:40:44:c8:fb:bc:f7:51:ee:de:53:05:d6:04:16:
c7:57:5c:f8:52:98:0e:e7:7d:f8:90:23:66:f4:49:
24:f7:e8:db:5f:ad:ea:0b:c1:3e:ee:17:52:e8:de:
aa:81:27:37:4b:28:80:0d:fb:07:b2:1b:51:b8:75:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:84:13:52:DA:51:D5:49:6B:A7:F3:F5:2A:40:45:E0:A8:69:0E
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fe:bb:b7:95:43:e7:22:99:c9:46:96:64:41:40:d1:bc:2b:
93:6a:83:e7:a5:6f:84:82:89:5d:db:be:5c:0b:52:44:4d:17:
e2:e1:4e:c3:0d:cf:a8:57:05:47:de:34:ba:5f:53:64:9e:17:
39:b7:0a:27:5c:b2:86:cb:55:58:d4:35:42:4b:66:c8:c2:1b:
cd:c3:bb:e2:a2:78:4f:d3:8d:93:ba:22:d3:ce:ec:69:eb:c1:
6a:ef:71:cd:76:4a:2b:9c:b4:aa:03:fa:ed:43:29:10:a9:ef:
db:61:25:93:66:03:78:b7:df:71:f0:da:d1:19:36:04:98:c0:
bc:b0:0e:8b:ac:6f:01:88:f1:c8:1e:f1:bc:24:ca:ea:1c:26:
5d:b8:9f:55:98:10:dd:30:0b:55:c7:a3:0b:05:56:4a:23:eb:
fa:50:d0:95:72:5c:c2:42:e5:95:2a:52:00:61:e4:81:f1:cb:
ab:28:32:90:50:a6:04:2b:a7:9d:55:25:bc:91:cd:43:97:57:
a8:61:dc:b8:5e:d6:e0:19:cb:8c:6c:0a:6b:5d:f8:01:f7:97:
75:01:ab:76:da:8c:a1:c0:43:23:9a:d8:5e:2f:49:1c:0d:ee:
b0:b5:0f:b3:87:fb:8a:31:ae:59:36:87:aa:f6:01:70:03:e0:
9a:b0:d6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:20 2025 by rpki-client